Oracle International Corporation

Kenneth Joseph Meltsner

Kent Arthur Spaulding

Reza M B'Far

Reza B'far

Reza B′Far

The present disclosure provide a multiple factor authentication process using text passcodes. A process performs a first verification of a user using an authentication credential transmitted via a first communication channel. Based on successfully performing the first verification, the process performs a second verification using a word or a textual phrase transmitted to the user via a different communication channel. The word or textual phrase can be a single-use, limited-time token provided as text or audio.

Authentication using words as a single-use passcode

The present disclosure provide a multiple factor authentication process using text pass codes. A process performs a first verification of a user using an authentication credential transmitted via a first communication channel. Based on successfully performing the first verification, the process performs a second verification using a textual phrase transmitted to the user via a different communication channel. The words included in the textual phrase can be selected to avoid ambiguous pronunciations and spellings.

Determining phrases for use in a multi-step authentication process

Techniques for managing complaints are disclosed. The system may receive complaints submitted by users. A complaint may describe an incident, such as a safety issue or a cheating incident. The system analyzes a set of complaints to identify similar complaints. Upon identifying a threshold number of similar complaints, the system generates an incident report based on the complaints. The system may refrain from generating or submitting any incident report for a complaint if the threshold number of similar complaints have not been received by the system. The system may or may not include information such as the identity of the reporter, the identity of the accused party, or the incident location in an incident report based on threshold criteria.

Crowd-sourced incident management

Computerized embodiments are disclosed for keeping personally identifying information within a protected domain environment when interacting with a computerized service environment. A restriction to be imposed on access to personally identifying information that is stored within a protected domain environment is received. A data residency protection component is generated based on the received restriction, stored in a data residency database that is accessible to the computerized service environment, and transmitted to a remote computerized system included in the protected domain environment. The data residency protection component is configured to, when executed: monitor data communications from the protected domain environment to detect the personally identifying information, generate a protected communication by isolating the personally identifying information, and transmitting the protected communication having the personally identifying information isolated. The record corresponding to the data residency protection component is reference to avoid creating a second data residency protection component that counteracts the restriction.

Systems and methods for providing data residency protection using remote proxies

Techniques for replacing a token with a mask value are disclosed. In an embodiment, a masking engine is implemented by a cloud application. The cloud application receives, from a client device, a request for a data value associated with a data field. The masking engine determines that a set of data stored in association with the data field corresponds to a token format. The cloud application transmits a mask value, rather than the set of data, towards the client device. In an embodiment, a masking engine is implemented by a client device and/or a data residency proxy. The masking engine receives a set of data for display at an interface of the client device. The masking engine determines that the set of data corresponds to a token format. The masking engine causes a mask value, rather than the set of data, to be displayed at the interface.

Replacing a token with a mask value for display at an interface

Computerized embodiments are disclosed for keeping personally identifying information within a protected domain environment when interacting with a computerized service environment. In one embodiment, user interface commands are received from a remote computerized system of the protected domain environment at the computerized service environment via computerized network communications. A data residency protection component is generated within the computerized service environment in response to the user interface commands. The data residency protection component is configured to act as a proxy for the computerized service environment, when executed in the protected domain environment by the remote computerized system, to isolate personally identifying information from visibility or storage outside of the protected domain environment. The data residency protection component is downloaded to the remote computerized system of the protected domain environment from the computerized service environment via the computerized network communications.

Growing community of inventors

Portland, OR, United States of America

Kenneth Joseph Meltsner